Analyzing Enterprise PKI Deployments

PKI solutions are frequently deployed in enterprise environments to solve various security problems (improving WLAN security with 802.1x, securing internal & external websites, signing code and sensitive documents etc). Due to the inherent complexity in PKI solutions, many enterprises have difficulty using and deploying them correctly. As such, any security assessment targeted to an enterprise environment should include an analysis of PKI solutions in use. This paper will describe how PKI solutions can be assessed as part of an overall security assessment program.